IT26575: MFT File Loggers fail to connect to Queue Manager with MQCSP authentication & password greater than 12 characters.

APAR status

• Closed as program error.

Error description

• Using a Managed File Transfer(MFT) File loggers with the
  following:
  
  	- Queue Manager setup to use "MQCSP authentication".
  	- Using Client connection to the Queue Manager.
  	- Using a user that has a password greater the 12
  characters.
  
  Can result in the File loggers failing to connect to the Queue
  Manager due to 2035/MQRC_NOT_AUTHORIZED:
  
  MFT File Logger output0.log:
  
  IBM MQ Managed File Transfer Data Path: '/var/mqm/mqft'
  
  Install Type:IBM MQ Managed File Transfer Standard Installation
  
  IBM MQ Components:
      IBM MQ JMS Provider / 9.1.0.3 / p910-003-190717
      Common Services for Java Platform, Standard Edition /
  9.1.0.3 / p910-003-190717
      IBM MQ classes for Java / 9.1.0.3 / p910-003-190717
      Java Message Service Client / 9.1.0.3 / p910-003-190717
      IBM MQ classes for Java Message Service / 9.1.0.3 /
  p910-003-190717
  ************* End Display Current Environment *************
  [20/09/2019 06:03:04:313 PDT] 00000001 Logger        I
  BFGDB0051I: The logger is running as a 64-bit process.
  [20/09/2019 06:03:07:788 PDT] 00000001 Logger        E
  BFGDB0004E: An MQ problem occurred with queue manager QM1. The
  reported reason code was MQRC_NOT_AUTHORIZED and the reported
  message text (if any) was: MQJE001: Completion Code '2', Reason
  '2035'.. You should examine the MQ error log (for example,
  /var/mqm/qmgrs/COORD_QM/errors/AMQERR01.LOG ) for further
  information about the problem.
  [20/09/2019 06:03:07:789 PDT] 00000001 Logger        W
  BFGDB0072W: The logger has ended because the queue manager is
  unavailable. The logger will be restarted when the queue manager
  becomes available.
  

Local fix

• Passwords of 12 or less characters will continue to work.
  
  IBM Cloud demands longer passwords, and no circumvention is
  possible.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  This APAR affects users who use Managed File Transfer File
  Loggers on IBM MQ LTS Version 9.1, using passwords greater than
  12 characters for user authentication.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  Managed File Transfer(MFT) File Loggers would not use the MQCSP
  Authentication attribute in the MQMFT Credentials file correctly
  if the password was longer than 12 characters. So, passwords
  longer than 12 characters would not work.
  

Problem conclusion

• The Managed File Transfer(MFT) File Logger has been updated such
  that it allows passwords longer than 12 characters.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.1 CD    9.1.4
  v9.1 LTS   9.1.0.4
  
  The latest available MQ maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ MFT V9.0

• Fixed component ID

  5724H7262

Applicable component levels